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Reed-Solomon (RS) codes form an important part of the high-rate downlink telemetry 
system for the Magellan mission , and the RS decoding function for this project will be 
done by the DSN. Although the basic idea behind all Reed-Solomon decoding algorithms 
was developed by Berlekamp in 1968, there are dozens of variants of Berlekamp ’s algo- 
rithm in current use. This paper attempts to restore order by presenting a mathematical 
theory which explains the working of almost all known RS decoding algorithms. The key 
innovation that makes this possible is the unified approach to the solution of the key 
equation , which simultaneously describes the Berlekamp, Berlekamp-Massey , Euclid , and 
continued fractions approaches. Additionally , a detailed analysis is made of what can 
happen to a generic RS decoding algorithm when the number of errors and erasures 
exceeds the code's designed correction capability , and it is shown that while most pub- 
lished algorithms do not detect as many of these error-erasure patterns as possible, by 
making a small change in the algorithms, this problem can be overcome. 


I. Decoding Reed-Solomon Codes 

In this article we will give a general definition of Reed- 
Solomon codes, state the abstract Reed-Solomon decoding 
problem, describe the two main classes of decoding algorithms 
(time- and frequency-domain decoders), and then give three 
theorems. Theorem 1 explains why the RS decoding algo- 
rithms work, and Theorems 2 and 3 delineate exactly what 
happens if the number of errors and erasures exceeds the 
codes’ designed correction capability. The article concludes 
with three appendices, which give the mathematical back- 
ground needed for the proofs of the theorems presented. 


Let F be a field which contains a primitive n th root of 
unity a. (We assume that the characteristic of the field does 
not divide n.) If L and r are fixed integers between 0 and «, 
the set of all codewords (vectors) C = (C 0 , . . . , C n _ x ) over 
F such that 

n - 1 

£ CV' = 0 / = L,L + \ L+r-l (1) 

i=0 

is called a Reed-Solomon code. The parameters n y r, and L are 
called the length , redundancy , and offset of the code. The 
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parameters k ~ n - r is called the code’s dimension. (Com- 
monly L = 0, 1, or (n - r + l)/2.) The polynomial g(x), 
defined by 

L+r-l 

g(x)= y \ ( x_a/ ) 

i=L 

is called the code’s generator polynomial. Note that C is a 
codeword if and only if the generating function for C, viz., 
C(x ) = C Q + C x x + * * * + C n _ 1 x n ^ 1 is a multiple of g(x). If n 
is odd and r is even, and L = (n - r + l)/2, then the roots of 
g(x) come in reciprocal pairs or*), for; (r/2) 

- 1, and#(x) is a “palindrome.” 

The Zras/c metric property of an RS code is that any two 
codewords must differ in at least r + 1 positions. Thus if 
d H (C f C') denotes the Hamming distance between the code- 
words C and C', and C ^ C', then it follows that 

d H (C,C')>r+\ (3) 

The basic combinatorial property of an RS code is that given 
any subset I C (0, 1, . . . , n - 1} of at most k coordinate posi- 
tions, and an arbitrary set {a. : i E 1} of elements from F, 
there exists an RS codeword C such that C i = a j for all 
i E I. (Proofs of these basic properties can be found in [2] , 
Section 7.3.) 

Suppose we transmit a codeword C over a channel, which 
can, on occasion, change any symbol from F into any other, 
and which in addition can “erase” any symbol, i.e., make it 
completely unintelligible. To model erasures, we introduce an 
“erasure symbol” * and add it to F : F = F U {*}. Thus we 
send a codeword, and receive a vector R = (R 0 , R 1 , . . . , R n ^ x ) 
from F n . The RS decoding problem , ideally, would be this: 
given REF”, find the nearest RS codeword. However, that 
proves to be too hard, and we must be satisfied with the solu- 
tion to an easier but closely related problem. 

To state the decoding problem precisely, we must define a 
distance between vectors over F, the RS decoding distance . If 
V = (F 0 , . . . , V n ^i) and V' = (Kq, . . . , V* n ^ x ) are vectors with 
components in F, we define 


^(V.v)-f (4) 

1=0 


where if x and y are elements of F, 

{ 0 if x = y 

1 if x # y and either x or y is * 

2 if x =£ y but neither x nor y is * 

(5) 

One way to think about this_metric is shown in Fig. 1, for 
F = GF(3). The elements of F are the vertices of a graph, with 
every element of F connected to * by an edge. Then ^^(x,^) 
is just the distance between x and y in the graph. Note that if 
V and V' are vectors with components in F (i.e., with no *s) 
we have 

dfcsCV.V') = 2rf H (V f V') (6) 

The decoding problem for an RS code of redundancy r can 
now be stated. Given an _arbitrary vector R = (R 0 , . . . , 
with components from F, find all RS codewords C such that 

d RS (C,R)<r (7) 

First, note that there can be at most one codeword C such that 
Eq. (7) holds. This is because if ^rs(C, R) < r and <iRs(C', R) 
< r, then by the triangle inequality 

<W C > c ') < <W C > R > + c ') < 2r 

which implies by Eq. (5) that d H (C, C') < r, violating Eq. (3), 
unless C = 

We now describe an efficient algorithm, essentially due to 
Elwyn Berlekamp ([1], Chapter 7), for solving the decoding 
problem. 

For a given R, its erasure set I 0 is defined as 

/„ ={/:*,=*} t 0 = \I 0 \ ( 9 ) 

(The notation I S I denotes the number of elements in the set 
S.) The decoder’s first step is to calculate the erasure locator 
polynomial a 0 (x), defined by 

° 0 ( x ) = n (!-«'*) ( io > 

/e / 0 
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(If there are no erasures in R, a 0 (x) is defined to be 1.) If the 
number of erasures f 0 exceeds r, there can be no solutions to 
Eq. (7); in this case the decoder should simply print “too 
many erasures!” and stop. We will assume that t Q < r in the 
rest of the discussion of the decoding algorithm. 


(see Appendix C). The polynomial a x (x) is traditionally called 
the error locator polynomial , and c o(x) is called the error -and- 
erasure evaluator polynomial . Now the decoder multiplies 
a 0 (x) and cr^x), obtaining a polynomial o(x ), called the 
erasure/error locator polynomial. 


Once the erasure locator polynomial is calculated, the de- 
coder replaces the *s in R with symbols from F. Usually these 
symbols are chosen to be Os, but if the decoder has “side infor- 
mation” about the original values of the C { s corresponding to 
the erased indices i E 7 0 , these values can be used. In any case, 
the result is a new vector R' = ( R ^ , . . . , ), defined by 


Once the polynomials a(x) and cj(x) are known, there are 
two essentially different ways to complete the algorithm. 
These are usually called the time-domain approach and the 
frequency-domain approach. 

The time-domain approach can be described by the follow- 
ing pseudocode fragment. 


*; = 


R. if/ £ I n 


if / ei n 


( 11 ) 


where Z ( = 0 is the usual choice. 

Next, the syndrome is computed, i.e., the r values 

n-l 

S f = for/ = L,L + 1, . . . ,L + r - 1 (12) 

1=0 

which are used as coefficients in the syndrome polynomial 


S ^ = S L +S L + l X+ '- + S L +r -l Xr ' 1 03 ) 

If erasures are present the decoder continues by calculating the 
modified syndrome polynomial S 0 (x), defined by 


S 0 (x) = S(x)o Q (x) (mod x r ) (14) 


Now comes the key step. Define the numbers p and v by 


A* = L(r-t 0 )l 2J 
v = r(r + r 0 )/2l- 1 


(15) 


(If x is a real number, lx\ is the greatest integer less than or 
equal to x, and fxl is the least integer greater than or equal to 
x.) It is an easy exercise to show that p + v - r - 1. The de- 
coder now solves the (x r , 5 0 (x), p , v) problem, i.e., it finds the 
unique lowest degree pair of polynomials cjj(x) and u>(x) such 
that deg^) < p, deg(cc) < v , and 


o x (x)S Q (x) = co(x) (mod x r ) 


I* Time domain fragment */ 

{ 


if (o 0 = 0 or deg(co) > t Q + deg(a 1 )) 
decode = FALSE; 
else { 

count = 0; 

for (i = 0 to n - 1) { 

if(a(a"0 = 0 and o (cr^^O) 
count = count + 1 ; 


E t = 


a ( orO 


{ 


else 


E { = 0; 

} 

if (count = deg(a)) 
decode = TRUE; 
else 

decode = FALSE; 

} 


After execution, if “decode” is “TRUE,” C = (C 0 , . . . j), 

where C t = Rj - E t for / = 0, 1 , . . . , n - 1 is the unique code- 
word within RS distance r of R. On the other hand, if “de- 
code” is “FALSE,” the decoder just prints the warning “no 
codeword within RS distance r.” All early RS decoders used 
an algorithm much like this; such an algorithm is described as 
a “hybrid decoder” in Figure 9.2 in Blahut [2] . 

The frequency-domain approach can be described by the 
following pseudocode fragment. (In this listing, d denotes the 
degree of a(x).) 
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I 


/* Frequency Domain Fragment */ 

{ 

if (a 0 = 0) 

decode = FALSE; 
else { 

decode = TRUE; 

for (j = L + r to n + L + d - 1) 


d 

..s 

0 ;t=i 

for(j=n + Lton + L + d- 


s , ■ - h t 


decode = FALSE; 
break; 


1) 


} 

} 

if (decode = TRUE) 
for (i = 0 to n - 1) 


Proof: First, we suppose there is a codeword C = (C 0 , . . . , 
C n _ t ) within RS distance r of R. We will show that conditions 
(A), (B), and (C) are satisfied* To do this, we define / 0 , a 0 (x), 
and R' as in Eq. (11) (the erasure fills Z { can be arbitrary). 
Next, we define the error s.et I x and error locator polynomial 
o x (x) as 



(16) 

o,(x) = n o -<***) 

(17) 

and the error- and- erasure pattern as E = (E 0 , . . 
where 

• > 1)> 

E. - - C. for / = 0, 1 

(18) 

Finally we define the error-and -erasure set I and the error-and - 
erasure locator polynomial o(x ) by 


(19) 




/= 0 


The decoder now finishes exactly as the time-domain de- 
coder did. The “frequency-domain decoders” described in 
[2, Figure 9.2] and the decoder described in [5] follow this 
general description. (The “time-domain decoder” described in 
Figure 9.7 in [2] is a rare example of an RS decoding algo- 
rithm which is apparently not closely related to the descrip- 
tions in this section. See Whiting [6] for a survey of Reed- 
Solomon decoding algorithms.) 


In each case, the algorithm will locate the codeword within 
RS distance r of R, if there is one, and will print the message 
“no codeword within RS distance r” if there is not. The fol- 
lowing theorem explains why. 

Theorem 1 . There is a codeword within RS distance r of R if 
and only if the following three conditions are satisfied: 


a(*) = n(l-“'*) (2°) 

It follows from Eqs. (12), (18), and (1) that the syndromes 
Sj satisfy 


n - 1 

S. = ^ E. a l i for/ = L, . . . , L + r - 1 (21) 

z-0 


which implies that 

v -zV)'-'' 

1=0 


for/ = 0 r - 1 


(22) 


Thus S L , S i+1 , . . . , S L+ r _ j are the first r components of the 
DFT V = (V 0 , . . . , V n _ 1 ) of the “twisted error pattern” V = 
(K 0> F, ^-i), defined by 


V. = E. <x iL for / = 0, . . . , n - 1 (23) 


(A) 

deg (w (*))< t Q + deg (Oj(x)) 

It follows then from Eqs. (13) and (22) that if we define V{x) 

(B) 

aj(0)#0 

= V 0 + V 1 x + --- + Kh.jX"-!, then F(x) = S(jc) 

(mod x »•), 

and indeed, if we define V 0 {x) = a 0 (x) V(x) mod 

jc'.that 

(C) 


<£> 

II 

(24) 
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where S Q (x ) is defined in Eq. (14). If we now define the error- 
and-erasure evaluator polynomial as 

wW = ( 25 ) 

ie/ 

where cr*(x) = cr(x)/(l - a*x), (compare this to Eq. (B-5) in 
Appendix B), it follows from Theorem B-6 in Appendix B that 

o{x)V{x ) - co(x)(l -x") (26) 

and so, since a(x) = a 0 (x) a^x) and V Q (x ) = a 0 (x) F(x), 

O) V 0 (x) = w(x) (mod x r ) (27) 

Furthermore, since C is assumed to have RS distance r or less 
from R, it follows that t Q + 2 deg(aj) < /*, which in turn im- 
plies degfaj) < p, and deg(co) < deg (a) = t 0 + deg(aj) < 
where p and y are defined in Eq. (15). Furthermore, o x and co 
are relatively prime, since by Lemma B-2 in Appendix B for 
each i E I x , co(flrO =£ 0. Therefore (a x , w) is the solution to 
the (x r , V 0 (x\ p , y) problem, which by Eq. (24) is the same as 
the (x r , S 0 (x), p, v) problem. Thus the polynomials produced 
by the decoding algorithm must be the error locator poly- 
nomial and the error-and-erasure evaluator polynomial, and 
these polynomials satisfy conditions (A), (B), and (C): Equa- 
tion (25) implies (A); Equation (10) implies (B); Equation 
(20) implies (C). 

To complete the proof, we suppose that* conditions (A), 
(B), and (C) are satisfied. We will show that this implies that 
there is a codeword within RS distance r of R. To do this we 
define a(x) = a Q (x) Oj(x); note that condition (A) says that 
deg(to) < deg(a), and condition (C) says that o(x)|(l -x"). 
Hence by Theorem B-5 in Appendix B, there exists a vector 
V = (V 0 , V x , . . . , V n _ l ) and a support set / for V such that 

a(x) = Xa 7 (x) (28) 

W(x) = Xojy j(x) (29) 

We claim now that the vector C = (C 0 , . . . , C n _ x ), defined by 

C. = R\ - V.*- iL for / = 0, 1 (30) 

is a codeword within RS distance r of R. First we show that 
R) ^ tr. This is because R has t Q erasure symbols, and 
apart from these, differs from C only in those indices i for 
which V { =£ 0, i.e., a.(cr*) = 0. But by condition (C), o x has 
exactly deg(aj) roots in {1, a, ... , a"" 1 }, and deg(a 1 )<M, 
and so 


£? rs ( c , R) = t Q + 2 deg (ffj) < t 0 + t 0 

+ 2 L(/*- ? 0 )/2J (31) 

All that remains is to show that C, as defined in Eq. (30), is a 
codeword. Since o x and cc(x) solve the (x r , £ 0 (x), p, v) prob- 
lem, we know that 

aj(j()S 0 (x) = w(*) (mod x r ) (32) 

But by Eq. (14), S 0 (x) = S(x) o 0 (x) mod x r ; and since o(x) = 
a 0 (x) aj(x), by Eq. (32) we have 

v(x)S(x) = co(x) (modx r ) (33) 

On the other hand, by Eqs. (28) and (29), together with Theo- 
rem B-6 in Appendix B, we have 

cr(x)^(x) = cu(x) (modx r ) (34) 

Now gcd(a 0 (x), x r ) = 1 (see Eq. 10), and condition (B) guar- 
antees that gcd(aj(x), x r ) = 1, and so gcd(a(x),x r ) = 1. Thus 
by Eqs. (33) and (34) we have 

S(x) = V(x) (modx'') (35) 

Equating coefficients of x' for / = 0, 1 , . . . , r - 1 on both sides 
of Eq. (35), we see that 

S j+L = V. for / = 0, 1 , . . . ,r - 1 (36) 

But this implies that 

n-1 n-1 

^ R'i <**' = 2 V i ot ' iLaii for; = L L + r - 1 

/=0 i~0 

(37) 

which says that C, as defined by Eq. (30), is a codeword. ■ 

With the help of Theorem 1 , we can now explain why the 
time-domain and frequency-domain decoders work. First, we 
discuss the time-domain decoder. The first line checks condi- 
tion (A) and (B) of Theorem 1. The “for” loop checks condi- 
tion (C), by evaluating the polynomial o(x) for x = or*, for 
/ = 0, 1 1 . Notice that there is a check for a (or 1 ) = 0; 
this is necessary, since as we will see, it is possible for o(x) to 
have a double root. The formula for E t follows from Eq. (26) 
and Corollary B-7 in Appendix B, and the fact that E t = FJer Ll 
(see Eq. 23). 
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Next, we consider the frequency-domain decoder. The first 
line checks condition (B) of Theorem 3. The first “for” loop 
extends the sequence S L’ S L + 1 > • * • >$L+r-l recursively, using 
o(x ) as the characteristic polynomial, and the second “for” 
loop checks to see whether or not this extension has period n. 
If the sequence is not periodic, then either condition (A) or (C) 
must fail, by the first part of Theorem B-10 in Appendix B. 
On the other hand, if the sequence is periodic, then 


tion (B) anyway since it is so easy to do so; if (B) fails, no fur- 
ther work is necessary. Theorems 2 and 3 show conditions (A) 
and (C) are independent, however, so that they both must be 
checked. 

Theorem 2. For any word R E F n , the polynomials cr^x) 
and co(x) must satisfy the following three conditions: 


d 

£ o k S hk = 0 for all j > L + d 

k-0 

and so if u(x) = + S L+ 1 X + • * • , then cj ( x ) u(x) has de- 

gree < d. But a(x) w(x) = oo(x) (mod x r ), and so deg(co) < 
d , i.e., condition (A) is satisfied. Next, since condition (B) 
insures that gcd(a 1 , co) - 1 , the second part of Theorem B-10 
shows that condition (C) holds. Finally, the formula given 
for the error vector E i follows from the fact that (S L , . . . , 
S L+n _ i ) is the DFT V of the twisted error V vector defined in 
Eq. (23). This follows from the basic Theorem B-6, which says 
that the components of V satisfy the homogeneous difference 
equation whose characteristic polynomial is a(x). 

All published RS decoding algorithms correctly locate the 
codeword within RS distance r of the received word, if there is 
one. However, almost all of these algorithms (including all 
algorithms in [2], [3], [5], and [6]) can fail badly when 
there is no such word. By this we mean that there usually exist 
words R which are not within RS distance r of any codeword, 
and yet which cause the decoder to output a vector C rather 
than to print the message “no RS codeword within RS dis- 
tance r.” One naive way to avoid this problem is simply to test 
any word produced by the decoder to see if it is a codeword, 
and then to see if it is within RS distance r of the received 
word. However, this method is not quite foolproof (division 
by zero is possible in either the time- or frequency-domain 
approaches), and more complex than necessary. 


(D) 

deg(Oj) < ii 

(E) 

deg(w) < v 

(F) 

gcd(Oj,w) = x 1 


where x* is the highest power of x dividing ^(x). 


Proof: Conditions (D) and (E) follow from the definition of 
the (a, b, fx, v) problem. Condition (F) follows from Lemma 
C-3 in Appendix C. ■ 

Theorem 3. Conversely, given a set I Q of t 0 erasure locations 
and any pair of polynomials a x (x) and co(x) satisfying condi- 
tions (D), (E), and (F), there exists a vector R G F n , and a 
choice of “erasure fills” Z / (see Eq. 11) which will produce 
Xaj(x) and Xco(x) as the solution to the (x r , S 0 (x), /r, v) 
problem. Indeed, if Oj(x) and <o(x) are relatively prime, let 
S = [S 0 , S t , . . . , S n _ l ] be any vector such that 

‘ S L + 5 L + l JC + -" + 5 L + r-l X ''' 1 = ^ m0d *'' 


(38) 


where a(x) = a Q (x) ^(x), and if the vector R' = [^q, . . . , 
R , n ^ 1 ] is defined to be the inverse DFT of S, i.e., 


The difficulty is that the decoders typically do not check 
all of the conditions (A), (B) and (C) of Theorem 1 . The next 
two theorems explain why it is essential to make this check. 
Theorem 2 gives conditions on the polynomials and co that 
must always be satisfied, whether R is within RS distance r of 
a codeword, or not. Theorem 3, on the other hand, shows that 
the conditions imposed on o x and oo in Theorem 2 are suffi- 
cient to guarantee the existence of a vector R which will pro- 
duce these polynomials. Together, these two theorems show 
that there are Rs that will produce a x s and cos satisfying some 
but not all of conditions (A), (B), and (C). Actually, condition 
(C) implies condition (B), but it is worthwhile to check condi- 


R\ = -TS. cr" 

1 n J 


/=* o 


fori = 0, 1 


(39) 


and if R is defined by 


*/ = 



if' ? f 0 
if/ e i 0 


(40) 


then if the RS decoding algorithm is applied to R, (using the 
components of R' to fill in the erasures) a t (x) and co(x) will 
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be the error locator and error-and-erasure evaluator polynom- 
ials. Similarly, if gcd(aj , c o) = x* with / > 0, any S satisfying 


S L +S L+ 1 X + 


+ Wi*" M = 


W(£) 

a(x) 


modx 


r-J 


(41a) 




°x,+r-/-r 


Appendix C and the example following it, (a x , go) is the solu- 
tion to the ( x r , ^(x), p, v) problem. Now if the decoding 
algorithm starts with R, and fills in the erasures to produce R', 
by Eq. (39) the syndrome polynomial S (*) will be S L + S L+1 X 
+ ■ ■ ■ + S^+r- 1*'* 1 > which, by Eq. (38), is the same as 
t o(x)/o(x) mod x r . Thus the modified syndrome o Q (x ) S(x ) 
will be S 0 (x) = co(x)/o 1 (jc) mod x r , and, as we have seen, this 
means that the decoding algorithms will produce ^(x) and 
cj(x) as the error evaluator and error-and-erasure evalua- 
tor polynomials. The case when gcd(a 1? go) =£ 1 is handled 
similarly. ■ 


mod x r ~ /+ 1 

o(x) 

(41b) 

again with R ' and R defined as in Eqs. (39) and (40), will do. 

Proof: We distinguish two cases: gcd(a 1? co) = 1 and 
gcd(a x , co) =£ 1. If gcd(aj , go) = 1, and 5 0 (x) is defined to be 
the polynomial c o(x)/o l (x) mod x r , then by Theorem C4 in 


Corollary. If t Q < k f then there is a vector R 0 that produces 
(aj , co) as the error locator polynomial and error-and-erasure 
evaluator with zeros as the erasure fills. 

Proof: Let R be the vector defined by Eq. (40), and let C 
be any RS codeword that agrees with R on the set 7 0 . (There 
will be such a codeword, by the basic combinatorial property 
of RS codes, since k > f Q .) Then the vector R = R 0 - C will 
have the same syndrome as R 0 , and has zeros on the erasure 
set I Q . ■ 
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Appendix A 

The Discrete Fourier Transform 


Let f be a field which contains a primitive nth root of 
unity a. (If the characteristic of F is finite, we assume that it 
does not divide n.) We first note 

n-l 

1 -x n = j - [ (1 -a*x) (A-l) 

i-0 

This is because the polynomials on both sides of Eq. (A-l) 
have degree n , constant term 1 , and roots of*, for / = 0, 1 , . . . , 
n - 1. 

Next, let 

V = (V 0 ,V 1 V n _ x ) (A-2) 

be an ^-dimensional vector over F, and let 

V = V n -i) ( A ’ 3 > 

be its discrete Fourier transform (DFT), defined by 
^ n ~ x 

V. = ^ V.a iJ for / = 0, 1, . . . , n - 1 (A-4) 

/=o 


The components of V can be recovered from those of V via 
the inverse DFT 

1 n ~ l ^ 

V. = — for / = 0, 1 1 (A-5) 

n /' = o 

If we interpret the components of V and V as the coefficients 
of polynomials, i.e., if we define 

V(x) = V Q + V x x + • • • + V„_ 1 x n ~ 1 (A-6) 

and 

F(jc) = V 0 + V x x + • • • + V n _ 1 x n ~ 1 (A-7) 

then the DFT and IDFT relationships, Eqs. (A4) and (A-5) 
become 

V. = V(a 0 (A-8) 

and 

V. = ^ F(0 (A-9) 
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Appendix B 

Some Important Polynomials and the Fundamental Identity 


Throughout this section / will denote a fixed subset of 
{0, 1, . . . , n - 1}. We associate several polynomials with this 
set. For example, the locator polynomial for / is 

Oj (*) = PI (1 -a'x) (B-l) 

«e/ 

The co-locator polynomial is 

’/(*)= n (i -° ,jc) (B - 2) 


Lemma B-2. If i £/, gj v 7 (ar z ) = dr 1 )- In particular, 

cov f/ (a-0 = 0 if and only if K, = 0. 

Proof: This follows from Eq. (B-5) and Lemma B-l . ■ 

Lemma B-3. The polynomials o\{x) are linearly indepen- 
dent, and therefore form a basis for the set of all polynomials 
of degree < |/| . 

Proof: If 

2 X i a l (x) = 0 

ze/ 


In view of Eq. (A-l) we plainly have 

1 -X n = Oj(x) Tj(x) (B-3) 

For each value of i £ / we also define 


on setting x = or*, we would get by Lemma B-l , orj(cr z ) = 0, 
but since (again by Lemma B-l) a 7 (or z ) # 0, this implies that 
= 0. The last statement of the lemma now follows from 
the facts that (a) each oj(x) has degree exactly |/| - 1 and 
(b) there are exactly |/| of them. ■ 


o\{x) 


Oj(x) 

(1 - a' x) 


= n t 1 - a * x ) 

/€/ 


The next lemma deals with the minimal support set /(V) of 
V, which is defined by 

/(V) = {/€/ : K^O} (B-6) 

In what follows, the corresponding polynomials will be de- 
noted by o v (x), 7 v (x), and oo v (x), rather than cr 7 ^(x), etc. 


Finally, let V = (V Qi V x , . . . , V n _ l ) be a vector, such that/ is 
a support set for V, i.e., V { = 0 if i ^ L Then the (V, /) evalua- 
tor polynomial is defined as 


w v>/ oo = 2 ^ °/( x ) ( B ‘ 5 ) 

zG7 


Lemma B-4. 

gcd(a f (x), co v/ (x))= fl (1 - oc‘x) 
/-/(V) 

In particular, gcd(a v (x), ou v (x)) = 1 . 


We will need several lemmas about these polynomials. 
Lemma B-l. For all /,/€/, 


Proof: If o>y 7 (x) had a factor in common with a 7 (x), then 
by Eq. (B-3) coy 7 (a -1 ') = 0 for some i €/. But by Lemma B-2, 
this is true if and only if V ( = 0, i.e., if / G / - /(V). fl 




0 

n.„<> 

k*i 


if / =£ i 
if / = / 


In particular, aj( oc~ l )¥=0. 


We note that for any V and support set /, a 7 (x) divides 
1 - x n and deg cj V 7 (x) < deg a 7 (x). The following theorem 
is a kind of a converse to this. 

Theorem B-5. Suppose a(x) and co(x) are polynomials such 
that <j(x)|1 - x n and deg(co) < deg (a). Then there exists a 
vector V and a support set / for V such that 


Proof: Follows immediately from Eq. (B4). 


a(x) = Xa 7 (x) 


(B-7) 
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GJ(X) = \0J VJ (X) 


(B-8) 


= TiW x )( l - jc ”) 

i*e/ 


for a nonzero constant X. Furthermore, if in addition gcd(a(x), 

oo(x)) = 1 , then in fact there exists a vector V such that = w v,/^) ~ * ) 


o(x) = \Oy(x) 
co(x) = \oj y (x) 


(B-9) The following Corollary to Theorem B-6 tells us how to 
reconstruct the nonzero components of V from a 7 (x) and 
B-10) Wy ( /(*). It involves the formal derivative o’j(x) of the poly- 

nomial a 7 (x). 


Proof: Suppose a(x) 1 1 -x n . Then Eq. (B-7) must hold for 
some subset /of {0,l,...,/?-l} and some nonzero constant 
X. Since deg(co) < deg (cr) = deg(a 7 ), and since the polynomials 
o'j{x) are linearly independent by Lemma B-3, 


w(*) = X 22 u i a j( x ) (B-ll) 

IGI 

for certain constants u t . Thus if we define 


Corollary B-7. If / is a support set for V, then for each i G I, 
we have 


V t = -a 


,' W V, 






(B-15) 


Proof: If we differentiate the fundamental identity in Eq. 
(B-13) we obtain 


1 u. if ; e 7 

(B-12) 

0 if/^7 

Eq. (B-10) follows on comparing Eq. (B-ll) to Eq. (B-5). 
Finally, by Lemma B-4, gcd(a 7 (x), u V / (r)) = 1 if and only if 
I = 7(V), and so if gcd (a(x), co(jc)) = 1, Eqs. (B-7) and (B-8) 
become Eqs. (B-9) and (B-10). ■ 

The next theorem is the most important result in this 
section. 


o 1 (x)V'(x) + a' I (x)V(x) = <ji VI (x)(-nx n ~ l ) 

+ Wy ;(x)(l - X n ) 

(B-16) 

Note that if ,v = a~‘ with i G I, from Eqs. (B-3) and (A-l) we 
see that both o f (x) and 1 - x n vanish. Thus if x = or*, Eq. 
(B-16) becomes 


Theorem B-6. If I is a support set for V, then the poly- 
nomials V(x), o T (x), and gj v 7 (x) satisfy 

Oj(x) V(x) = a/y^Ml - x n ) (B-13) 

Proof: Using the definitions in Eqs. (A-4) and (A-7), 
together with the fact that / is a support set for V, we find 
that 

1 

V00 = £Va" (B-14) 

/£/ /=0 

According to Eq. (B-4), Oj(x) = o‘(x) (1 - a' x) for all / G /, 
and so from Eq. (B-14) we have 


Oj(x) V(x) = ^ V.o'jix) (1 - a' x) ^ x> a‘> 
iei /= o 


ct' ( a* 1 ') V(a‘) = -«a'co v / (a - ') (B-17) 

But from Eq. (A-9), V(ol~*) = nV r This fact, combined with 
Eq. (B-17), completes the proof. ■ 

Corollary B-8. gcd(K(x), 1 -x n ) = r v (x). 

Proof: From Eq. (B-3) with I - /(V), we have 1 - x n = 
o v (x) r v (x). Then, if we divide both sides of Eq. (B-13) by 
a v (x), we get ^(x) = co v (x) 7y(x). Since by Lemma B-4, 
gcd(ay(x), cuy(x)) = 1 , the Corollary follows. ■ 

Now we can prove a kind of converse to Theorem B-6. 

Theorem B-9. Suppose that the vector V is given, and that 
for certain polynomials a(x) and cj(x) we have 

a(Jc)V(x) = oj(x)(1 -x n ) (B-18) 
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Then there exists a polynomial A(x) such that 


and co(x) = cj 0 + • * • + co d _ l x d ~ 1 , then it follows from Eqs. 
(B-26) and (B-27) that (i Uj ) satisfies an HDE with characteristic 
a(x) = A(x) ffy (x) (B-19) polynomial a(x) if and only if 


«W = X(x)co y (x) (B-20) 


cr(x)w(x) = co(x) (B-28) 


Proof: By Eq. (B-18) we have 

a(x) V(x) = 0 (mod 1 -x") (B-21) 

This implies that 

a(x) = 0 (mod 1 ( (B-22) 

\ gcd(l -x n ,f(*)) I 

But by Corollary B-8, gcd(l - x", F(x)) = r v (x), and from 
Eq. (B-3), 


where deg(to(x)) < deg(a(x)). In particular, the sequence 
(iij) is periodic of period «, i.e., Uj = u^ n for / >n, if and only 
if there is a polynomial £2(x) of degree < n such that 

(1 -x")u(x) = £2(x) (B-29) 

where deg ft < n. The following theorem is needed in the dis- 
cussion of the frequency -domain decoder. It assumes that (u/) 
is a sequence that satisfies a dth-order HDE with characteristic 
polynomial o(x), as described by Eq. (B-28). 


(1 - *") 

TyO) 


OyC*) 


and so Eq. (B-22) is equivalent to Eq. (B-19), for a suitable 
polynomial A(x). Then Eq. (B-18) becomes 


Theorem B-10. If a(x) divides 1 -x n , then the sequence 
(uj) has period n . Conversely, if (w ; ) has period n and if a(x) = 
a 0 (x) o 1 (x) # where a 0 (x) divides 1 - x n and gcd(aj(x), 
co(x)) = 1 , then a(x) divides 1 - x n . In particular, if gcd(o(x), 
1 — x n ) = 1 , then u(x) 1 1 -x”. 


X (x) a y (x) K(x) = cu(x) (1 - x”) (B-23) 

but multiplying Eq. (B-13) by A(x) we obtain 

A(x) a y (x) F(x) = X(x) co y (x) (1 - x") (B-24) 

Comparing Eq. (B-23) to Eq. (B-24), we see that 

co (x) = X(x) Wy (x) (B-25) 

as asserted. This completes the proof of Theorem B-9. ■ 

The next results in this section deal with homogeneous dif- 
ference equations (HDEs). We say that the infinite sequence 
u Q , « 1} . . . satisfies a dth-order HDE if there exist constants 
o 0 , ,o d , with o Q =£ 0 and o d ^ 0 such that 

d 

2 a k u /.fc = 0 {oi/ >d (B-26) 

= 0 

The polynomial a(x) = a 0 + • • • + o d x d is called the charac- 
teristic polynomial of the HDE, and the degree d of u(x) is 
called its order. If we define 


Proof: If a(x) divides 1 - x", then 1 - x n = o(x) r(x) for 
some polynomial r(x). If we multiply both sides of Eq. (B-28) 
by r(x), we obtain (1 -x") m(x) = co(x) r(x). But deg(oc(x) • 
r(x)) < deg(a(x) r(x)) = «, and so by Eq. (B-29) (w ; ) has 
period n . 

Conversely, if Eq. (B-29) holds, and we multiply Eq. (B-28) 
by 1 - x n and Eq. (B-29) by a(x), then we find that ft(x) 
• a(x) = co(x) (1 - x”). Therefore a(x) |cj(x) (1 - x"). 
Since a(x) = a Q (x) a x (x) and a 0 (x)|l - x n , it follows that 
a 1 (x)|co(x)(l - x n )j a Q (x). But gcd(o x (x), co(x)) = 1, and 
this means that a 1 (x)|(l -x")/o 0 (x), which implies that 
a(x) = a 0 (x)a 1 (x)|l -x w . ■ 

Having briefly discussed homogeneous difference equations, 
we are now in a position to discuss circular homogeneous dif- 
ference equations (CHDEs). We say that the finite sequence 
(w 0 , . . . , u n _ x ) satisfies a dth-order CHDE if there are con- 
stants a 0 , a l , . . . , o d with a 0 ^ 0 and o d ^ 0, such that 

d 

2 ° k u j-k = 0 for / = 0 1 (B-30) 

k = 0 


o k u._ k for; = 0 d- 1 (B-27) 

k = 0 


where the subscripts must be inieipieted mod n. The poly- 
nomial a(x) = o Q + c J jX + * • * + o d x d is called the characteristic 
polynomial of the CHDE, and d is its order. If we define 
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(B-33) 


w(x) = u Q + u x x + • * • + u n _ x x n , then Eq. (B-30) holds if and 
only if 



1 -x” 

gcd OO), 1 -x”) 


a(x)w(x) = 0 (mod 1 -x”) (B-31) 

which is a divisor of 1 - x n . Thus Theorem B-6 says that V sat- 
Equivalently , (w 0 , . . . , u n ~\) satisfies a CHDE if and only if isfles a CHDE of order |/|, where / is any support set for V. 
there is a polynomial w(x) such that Conversely, Theorem B-8 says that V does not satisfy a CHDE 

of order lower than |/(V)|. But we know from Eq. (B-6) that 
a(x)w(x) = a?(x) (1 -x") (B-32) |/(V)| = weight (V)and so we have proved Theorem B-ll. 


Plainly, the a(x) of smallest degree such that Eq. (B-32) holds Theorem B-ll. The weight of V is the degree of the least- 

is order CHDE satisfied by V. 
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Appendix C 

The (a(x), b(x), ix, v) Problem 


Given polynomials a(x ), b(x ), with deg(Z>) < deg (a) = m, 
and nonnegative integers ju, v with \x + v = m - 1, consider the 
set 5 = S(a, 6, /i, y) of all pairs of polynomials (a(x), go(x)) 
such that 

deg(a) < \x deg(co) < v (C-l) 

a(x)Z>(*) = go(x) (mod a(x)) (C-2) 

Theorem C-l. If [x + v = m - 1, the set S(a f b , /i, v) is not 
empty. Indeed, there exists a pair ( o Q , go q ) G S(a, b, jx, v ) such 
that every pair (a(x), co(x)) ES(a, b,fx, v) is of the form 

fW = (c-3) 

u>(x) = k(x)u 0 (x) (C-4) 

Furthermore, (a 0 , go 0 ) is unique up to multiplication by sca- 
lars. We summarize this by saying that (a 0 , co 0 ) “solves the 
(a(x), b(x), fx , p) problem.” 

Proof: A proof is given in [3] , Theorem 8.5, where it is also 
pointed out that Euclid’s algorithm can be used to find (a 0 , 
go 0 ). Specifically, if one applies Euclid’s algorithm as described 
there to the pair (a(x), Z>(x)), and stops when the degree of 
the remainder r y (x) becomes < v for the first time, then (r ; (x), 
r ; (jc)) is the solution to the (a(x), Z>(x), jx, v) problem. ■ 

Lemma C-2. (a, go) G S(a , Z>, ju, v) solves the (, a , Z>, /i, v) 
problem if and only if there exists a polynomial r(x) such that 


kco 0 = ko Q b + ra (C-7) 

But since (a 0 , co 0 ) G S(a , b, ix, v), we know that co Q = o Q b 
+ r Q a for some polynomial r Q (x), and so we have 

ku> Q = ko Q b +kT Q a (C-8) 

Comparing Eqs. (C-7) and (C-8), we see that r = kr 0 , and so 
/:|gcd(co 1 , o t , r x ). This implies by Eq. (C-6) that k is a scalar 
and so (a, go) is a scalar multiple of (a 0 , go q ), i.e., (a l5 coj) 
solves the ( a , b , p, v) problem. ■ 

Lemma C-3. If (a Q , co Q ) solves the (a, Z>, /i, i>) problem, then 

gcd (a Q , oj 0 ) = gcd («j 0 , a) (C-9) 

Proof: By Lemma C-2 we know that 

w 0 = a o b + V (C-10) 

with 

gcd(w 0 ,CT 0 ,T 0 ) = 1 (C-l 1) 

Now by Eq. (C-10) any common divisor of a 0 and a must 
divide a> 0 , i.e., gcd(a 0 , a)|gcd(a 0 , w 0 ). On the other hand, 
Eq. (C-10) also says that any common divisor of ct 0 and to 0 
must divide T 0 a and so by Eq. (C-l 1 ) must divide a. Thus 
gcd(a 0 , w o )|gcd(cr o , 0 ). ■ 


cc = ob +ra (C-5) 

where 

gcd (go, a, t) = 1 (C-6) 

Proof: Suppose that (a, co) solves the problem. Then by Eq. 
(C-2), there exists a polynomial r(x) such that Eq. (C-5) holds. 
If co(x), a(x), and r(x) had a common factor d(x), then with 
co' = co/d , o' = o/d , and r = r/d , Eq. (C-5) imphes go' = ob 
+ r a, which means ob = go' (mod a) is a smaller degree solu- 
tion to Eqs. (C-l) and (C-2), contradicting the minimality of 
(o, 70- 


Theorem C-4. Conversely, given polynomials a(x), a Q (x), 
and co 0 (x) such that Eqs. (C-l) and (C-9) hold, there exists a 
polynomial b{x) of degree < m - 1 such that (a 0 , a> 0 ) solves 
the (a(x),b(x),n,v) problem. 

Proof: Let d(x) = gcd(a 0 (x), w 0 (x)) = gcd(a 0 (x), a(x)), 
and Oj = ajd, coj = io 0 /d, a x = a/d. Since gcd(Oj , a, ) = 1 we 
can define 


GO 

b' = —mod a, (C-12) 

o, 1 


Conversely, suppose Eqs. (C-5) and (C-6) hold, and that 
(o 0 , co 0 ) solves the (a, b, ju, v) problem. Then by Theorem C-l, 
go = kco 0 , a = ko Q , and Eq. (C-5) becomes 


It follows that 


o^’ - go x (mod^) 


(C-l 3) 
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i.e., 

w, = (C-14) 

for a suitable polynomial (x). We note that 

gcd( o v t x ) = 1 (C-15) 

since a common factor of o x and t 1 would by Eq. (C-14) also 
divide cOj ; but gcd(aj , cc^) = 1. We now distinguish two cases, 
according to whether d and t 1 have a factor in common or 
not. 

Case 1: gcd (<i, r x ) = 1. In this case if we multiply Eq. 
(C-14) by d we obtain 

w o = % b ' +T i a (C-16) 

with gcd(o Q , oj 0 , r J ) = gcd W, r, ) = 1, and so by Lemma C-2, 
(a 0 , co 0 ) solves the ( a , b', p, problem, where b ' is defined 
by Eq. (C-12). 

Case 2: gcd(<i, Tj) 1. In this case, let \(x) be the product 
of all the irreducible polynomials which divide p but do not 
divide r x , i.e., 

X = P| {p : p is irreducible, p I d f p X Tj} (C-17) 
Next, we define 

b = b f + Xa x 

(C-18) 

r o = r i - Xff x 

Then from Eq. (C-14) it follows that 

co 1 =a 1 h + r 0 « 1 (C-19) 

If p is an irreducible divisor of d , then p cannot divide r 0 , be- 
cause if p | Tj then p X o x by Eq. (C-15) and p l X by Eq. 
(C-17), so that p K r 0 = t 1 - Xo x . On the other hand, if p X t x , 


shows that gcd (d, r Q ) = 1. Thus if we multiply Eq. (C-19) by 
d we obtain 

= °o b + r o a ( C ‘ 20 ) 

with gcd(co 0 , a 0 , r 0 ) = gcd(d, r 0 ) = 1, and so by Lemma C-2, 
(a 0 , co 0 ) solves the (a, b, p, i>) problem, with b defined in Eq. 
(C-18). ■ 

Example: Suppose a(x) = x m . Then the construction of 
Theorem C-4 simplifies considerably. Indeed, suppose we are 
given polynomials o 0 (x) and cj 0 (x) such that Eqs. (C-l) and 
(C-9) hold , with a (x) = x m . Then gcd (a 0 , co Q ) = gcd (a 0 , x m ) = 
x* for some value of /. If b{x) is such that Eq. (C-2) holds, 
then dividing by we obtain 

o x b = u> x (modx m ~i) (C-21) 

where gcd (o 1 ,x m ~ ; ) = 1. Thus if (a 0 , co 0 ) is to solve the 
(x m , b, p, a) problem, then it must be true that 

b ( x ) = ~ (mod x m ~’) (C-22) 

If /' = 0, i.e., if gcd(a 0 , co 0 ) = 1 , then Eq. (C-22) is both neces- 
sary and sufficient. On the other hand, if/' > 1 , it is easy to see 
that Lemma C-2 implies that (a 0 , to 0 ) solves the (x m , b, q. v) 
problem if and only if Eq. (C-22) holds and if in addition 

b(x) ? p. (mod x m ~ ,+ 1 ) (C-23) 

Thus if we expand co l /o l as a power series, viz. 

= a 0 +a i x + ‘ " ( C ' 24 > 

then any b(x) = b 0 + b x x + * * * + w *ll do, provided 

that 

b k - a k for k = 0, . . . , m - j - 1 


(C-25) 


